Behavioral task
behavioral1
Sample
3b532d77187a1187d75ec47a8c4d1740.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3b532d77187a1187d75ec47a8c4d1740.exe
Resource
win10v2004-20231215-en
General
-
Target
3b532d77187a1187d75ec47a8c4d1740
-
Size
133KB
-
MD5
3b532d77187a1187d75ec47a8c4d1740
-
SHA1
6cda766cc2d904c3403579aa254682fb8efdbe67
-
SHA256
99fa1bd0020799ee2b5c6cb6fb3f4d784f66eadd719c8296cc6c15f7f0d8c5a8
-
SHA512
8286d9bf75009f706ba2fdb7a4d1f8dc86d33811f08e58b7f7d0805c76263e9cb26679ae5f99cc66d8ae57fbbca13ecfb5c8bd9f10fda3503a88943d3587d57f
-
SSDEEP
3072:CAlSBt4PKKMrCpWjIY++xLshIsooNpDDOLwfbsPkJaMT67Q:YBGPU5xdsoOpDDOLwfbsQ67Q
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b532d77187a1187d75ec47a8c4d1740
Files
-
3b532d77187a1187d75ec47a8c4d1740.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE